logo elektroda
logo elektroda
X
logo elektroda

The Dahua IP recorder changes the network configuration itself

Puzieekk 6657 10
Best answers LABEL_AI_GENERATED

Why does my NVR keep changing its IP address and DNS settings by itself, and how can I stop it?

The thread suggests the recorder is likely compromised or infected, especially because it was exposed through DMZ/UPnP, and changing passwords alone will not fix it. Disable the DMZ, disable UPnP, move the forwarded ports to non-standard values instead of 37777/37778/80, delete the default users 888888 and 666666, set a strong admin password, and do not allow telnet from outside [#16394231] One user later reported that these steps did not help and the distributor said the recorder was infected with viruses and needed a restoration service, so the practical fix may be a clean reinstall/service or replacing the unit [#16397406] The importer also provides a “virus removal”/corrective procedure for this equipment [#16398420]
AI summary based on the discussion. May contain errors.
ADVERTISEMENT
Treść została przetłumaczona polish » english Zobacz oryginalną wersję tematu
  • #1 16393107
    Puzieekk
    Level 7  
    Posts: 5
    Hello,
    I have a problem with the Dahua IP recorder, for several days I have been struggling with the constantly changing network configuration on the device.
    I set the recorder to the internal network 192.168.xx, then I set this address in the DMZ in Router and at this point everything works fine, I have access to monitoring from inside and outside. The problem appears after a few working hours, when I can no longer connect to the recorder, neither in the internal nor external network. The recorder itself is on, but the network configuration is totally changed. Ip address changed to some 10.179.114.x, DNS 1.2.3.4
    And now when I try to set it up again, when I try to save the settings I get a message that ipv6 has not been configured. So I switch to ipv6 and see that all the fields are empty, I click default and go back to ipv4 and now after clicking save everything works again ... for a few hours and everything is back again. Have any of you encountered a similar problem?
  • ADVERTISEMENT
  • #2 16393195
    szymon122
    Level 38  
    Posts: 4094
    Help: 302
    Rate: 762
    Set a static address instead of DHCP.
  • ADVERTISEMENT
  • #3 16393207
    Puzieekk
    Level 7  
    Posts: 5
    Sorry, I forgot this important thing. DHCP on the device is turned off
  • #4 16393228
    Adko
    Level 12  
    Posts: 55
    Help: 2
    Rate: 1
    What is this recorder?
    Has 2 network cards?
  • ADVERTISEMENT
  • #5 16393484
    Puzieekk
    Level 7  
    Posts: 5
    Sorry for so long, but the registrar is currently at the other end of Poland and I have to contact an employee in that area.
    Well, the employee misled me, it is not a Dahua recorder, but a BCS NETWORK VIDEO RECORDER NVR0801E
  • #6 16394231
    xury
    Automation specialist
    Posts: 7083
    Help: 878
    Rate: 1498
    Puzieekk wrote:
    later in Router I set this address in DMZ

    You are giving the green light to the bluntest script kiddie to hack this NVR :)
    What do you need to do ?:
    1. Disable the DMZ
    2. Disable Upnp
    3. Redirect ports on the router other than standard: that is, not 37777 and 37778 and port 80 also to another.
    4. Delete users 888888 and 666666 and make new ones. Admin, of course, the password is also set to its own.
    5. Don't let telnet outside.
    It doesn't guarantee 100% certainty anyway, but at least it makes breaking in a lot more difficult.
  • ADVERTISEMENT
  • #7 16395004
    Puzieekk
    Level 7  
    Posts: 5
    User 666666 was deleted and all the rest had passwords changed, I'll change passwords and I'll try.
  • #8 16396714
    xury
    Automation specialist
    Posts: 7083
    Help: 878
    Rate: 1498
    If you don't disable DMZ and you don't redirect ports to non-standard ones, changing passwords alone won't do anything.
  • #9 16397406
    Puzieekk
    Level 7  
    Posts: 5
    Unfortunately, it did not help, I got information from the distributor that the recorder is infected with viruses and the cost of restoring it to operation is about PLN 50-100 net and waiting for about 6 weeks. Currently, a new properly configured recorder is going to the site
  • #11 16429815
    Kazek46
    Level 1  
    Posts: 1
    Hello raffin. Unfortunately, the method of "virus removal" did not work in my case. The importer replied to my e-mail that they are waiting for the problem to be solved (three weeks already). What to do next? I don't know.

Topic summary

LABEL_AI_GENERATED
The discussion revolves around a user experiencing issues with a Dahua IP recorder, which is reportedly changing its network configuration autonomously. Initially set to a static IP within the internal network, the device reverts to a different IP address after a few hours, causing connectivity problems. The user confirms that DHCP is disabled. Responses suggest disabling DMZ, UPnP, and using non-standard port redirection to enhance security. The user later clarifies that the device is actually a BCS NETWORK VIDEO RECORDER NVR0801E, which may be infected with viruses, leading to a recommendation for professional restoration services. Attempts to resolve the issue through suggested methods have been unsuccessful, and the user is awaiting a new recorder.
AI summary based on the discussion. May contain errors.
ADVERTISEMENT